From 04c1e6611b1369a3a8c6f65995dc47490a10b9ed Mon Sep 17 00:00:00 2001 From: Fabien Potencier Date: Thu, 20 Dec 2012 17:30:35 +0100 Subject: [PATCH] added a warning about a security issue when using the _internal route --- app/config/routing.yml | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/app/config/routing.yml b/app/config/routing.yml index 8b4740a115..707b3225b5 100644 --- a/app/config/routing.yml +++ b/app/config/routing.yml @@ -1,4 +1,8 @@ # Internal routing configuration to handle ESI +# ****** WARNING ****** +# This route should be enabled with caution as it can open a security vulnerability +# see http://symfony.com/blog/security-release-symfony-2-0-20-and-2-1-5-released for more information +# ****** WARNING ****** #_internal: # resource: "@FrameworkBundle/Resources/config/routing/internal.xml" # prefix: /_internal